<!DOCTYPE html>
<html>
<body>
    <p>This is an IFrame sending a Content-Security-Policy-Report-Only header containing "{{GET[policy]}}".</p>
</body>
</html>
